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SOFTWARE MANAGEMENT 


1 Introduction 


1.1 This Notice sets out additional requirements applicable to 
the certification and continued airworthiness control of 
software used in aircraft equipment and systems. 


1.2 Extensive use is now being made in aircraft of software- 
based equipment and systems. Typically, software may be 
used in primary and secondary flight controls, engine 
controls, electrical generation and distribution, brakes, 
radio and navigation equipment, flight instruments, and 
automatic flight control. The software may have a direct 
influence on aircraft safety. Hence, in meeting the appro- 
priate aircraft requirements and, for Controlled Items, the 
Requirements of BCAR Section A, it is necessary to investi- 
gate the software design and to control its certification and 
post-certification configuration in a manner equivalent to 
that for conventional safety-critical systems. 


1.3 RTCA/EUROCAE document DO-178/ED-12t, issued 
May 1982, entitled ‘Software Considerations in Airborne 
Systems and Equipment Certification’, provides guidance 
to aircraft constructors, equipment manufacturers and air- 
craft operators on software practices that would support the 
certification of software-based equipment and systems. This 
document is acceptable to the CAA as a basis for the certifi- 
cation of the software in aircraft equipment and systems. 


2 Requirements 
2.1 General 


2.1.1 In addition to the normal assessment of system 
criticality, the responsible Design Organisation (normally 
the aircraft constructor) shall assign a Software Criti- 
cality Category to each software-based equipment or 
system which shall relate to the severity of the effect of 
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possible software errors within the equipment or system 
(see Appendix to this Notice). The Software Criticality 
Category assigned shall be agreed by the CAA. 


2.1.2 Where the equipment is to be the subject of an appli- 
cation to CAA for Accessory Approval or Appliance 
Registration, as provided by BCAR Section A, Chapter 
A3-3 or A3-4, the level of Software Criticality Category 
shall be declared in the Declaration of Design and Per- 
formance. | 


2.1.3 Where the equipment or system is to be approved 
under the Component Procedure of BCAR Section A, 
Chapter A3-3 or, under the aircraft modification pro- 
cedure of BCAR Section A, Chapter A4-1, the Software 
Criticality Category of the equipment or system shall be 
declared. 


2.1.4 Details of equipment and system Software Criticality 
Categories should be provided to the aircraft operators 
to assist in the evaluation of post-certification modifica- 
tions (see paragraph 2.3). 


2.2 Initial Certification In respect of a software-based 
equipment or system, the responsible design organisation 
shall provide evidence to the CAA that the software has 
been designed, tested and integrated with the hardware in a 
manner which ensures compliance with BCAR Section A 
(see paragraph 3.1). 


2.3 Post-Certification Modifications In respect of equipment 
and systems with software in the Major, Hazardous or 
Catastrophic Criticality Categories, a modification which 
affects software shall not be embodied unless it has been 
approved by the responsible Design Organisation (see para- 
graph 3.2). 


Interpretation of Requirements 
3.1 Initial Certification | 


3.1.1 An applicant for the approval of a software-based 
equipment or system may use the guidance material 
given in document DO-178/ED-12 (or an agreed 
equivalent standard) as a means of securing CAA 
approval of the associated software. 

3.1.2 A software Configuration Management Plan, e.g. as 
defined in Part 7 of document DO-178/ED-12, will be 
required as a means of software identification and change 
control to be effective throughout the life of the equip- 
ment. The plan will need to be managed by the respons- 
ible design organisation. 
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3.2 Post-Certification Modifications 

3.2.1 Modifications to software will be subject to the same 
approval procedures as are applied to hardware modifi- 
cations (see BCAR Section A, Chapters A3-3, A3-4 or 
A4-1 as appropriate). Modified software will need to be 
identified and controlled in accordance with the pro- 
cedures stated in the Software Configuration Manage- 
ment Plan. The guidance material given in document 
DO-178/ED-12 (or an agreed equivalent standard) may 
be used as a basis for the approval of software modifica- 
tions. 


NOTE: The term ‘maintenance’ is often used by software specialists 
when referring to modifications to software. 


3.2.2 The CAA will require the design and investigation of 
a modification, including those proposed by the aircraft 
operator, to involve the support service provided by the 
design organisation responsible for the equipment or 
system. It is unlikely that an aircraft operator could 
justify the establishment of its own software design 
capability. Therefore, where the Software Criticality 
Category is Major, Hazardous or Catastrophic, the air- 
craft constructor would normally be the appropriate 
Design Organisation, although tasks may be delegated to 
equipment manufacturers or software organisations. 


3.2.3 Aircraft operators will need to ensure that their 
normal procedures will report software problems to the 
responsible design organisation. 


a, Implementation With effect from 1 November 1983, 
software in aircraft systems and equipment will be subject to the 
provisions of this Notice. 


for the Civil Aviation Authority. 
Airworthiness Division, 
Brabazon House, 
Redhill, Surrey RH1 1SQ. 
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